‼ CVE-2023-2065 ‼
📖 Read
via "National Vulnerability Database".
Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28 .📖 Read
via "National Vulnerability Database".
🕴 Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks 🕴
📖 Read
via "Dark Reading".
Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.📖 Read
via "Dark Reading".
Dark Reading
Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks
Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.
🕴 How Universities Can Bridge Cybersecurity's Gender Gap 🕴
📖 Read
via "Dark Reading".
It's time to invest in initiatives that engage young women in cybersecurity early and often.📖 Read
via "Dark Reading".
Dark Reading
How Universities Can Bridge Cybersecurity's Gender Gap
It's time to invest in initiatives that engage young women in cybersecurity early and often.
⚠ PyPI open-source code repository deals with manic malware maelstrom ⚠
📖 Read
via "Naked Security".
Controlled outage used to keep malware marauders from gumming up the works. Learn what you can do to help in future...📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps 🕴
📖 Read
via "Dark Reading".
A cybersecurity vulnerability found in an implementation of the social login functionality opens the door to account takeovers and more.📖 Read
via "Dark Reading".
Dark Reading
OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps
A cybersecurity vulnerability found in an implementation of the social login functionality opens the door to account takeovers and more.
⚠ Ransomware tales: The MitM attack that really had a Man in the Middle ⚠
📖 Read
via "Naked Security".
Another traitorous insider, busted by system logs that gave his game away.📖 Read
via "Naked Security".
Naked Security
Ransomware tales: The MitM attack that really had a Man in the Middle
Another traitorous sysadmin story, this one busted by system logs that gave his game away…
‼ CVE-2022-46816 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <=Â 1.1.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47447 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <=Â 3.3.8 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47446 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin <= 3.98.7 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47180 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Kopa Theme Kopa Framework plugin <=Â 1.3.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46794 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in weightbasedshipping.Com WooCommerce Weight Based Shipping plugin <=Â 5.4.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25028 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in chuyencode CC Custom Taxonomy plugin <=Â 1.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1174 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33944 ‼
📖 Read
via "National Vulnerability Database".
Cross-site scripting (XSS) vulnerability in Layout module in Liferay Portal 7.3.4 through 7.4.3.68, and Liferay DXP 7.3 before update 24, and 7.4 before update 69 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a container type layout fragment's `URL` text field.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33947 ‼
📖 Read
via "National Vulnerability Database".
The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in search which allows remote authenticated users in one virtual instance to view object definition from a second virtual instance by searching for the object definition.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25748 ‼
📖 Read
via "National Vulnerability Database".
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.io` or `extensions` API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33946 ‼
📖 Read
via "National Vulnerability Database".
The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instances, which allows remote authenticated users in one virtual instance to view objects in a different virtual instance via OAuth 2 scope administration page.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47152 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Etison, LLC ClickFunnels plugin <=Â 3.1.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33945 ‼
📖 Read
via "National Vulnerability Database".
SQL injection vulnerability in the upgrade process for SQL Server in Liferay Portal 7.3.1 through 7.4.3.17, and Liferay DXP 7.3 before update 6, and 7.4 before update 18 allows attackers to execute arbitrary SQL commands via the name of a database table's primary key index. This vulnerability is only exploitable when chained with other attacks. To exploit this vulnerability, the attacker must modify the database and wait for the application to be upgraded.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33948 ‼
📖 Read
via "National Vulnerability Database".
The Dynamic Data Mapping module in Liferay Portal 7.4.3.67, and Liferay DXP 7.4 update 67 does not limit Document and Media files which can be downloaded from a Form, which allows remote attackers to download any file from Document and Media via a crafted URL.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1944 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability enables ssh access to minikube container using a default password.📖 Read
via "National Vulnerability Database".